12233 matches found
CVE-2022-25653
CVE-2022-25653 is a buffer over-read in Qualcomm Snapdragon video processing of AVI files that leads to information disclosure. The issue affects Snapdragon components and is tied to an information-disclosure vulnerability from reading AVI data, with local attack vector and low attack complexity ...
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
Code injection
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
CVE-2022-40737
Bento4
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
CVE-2022-40737
An issue was discovered in Bento4 through 1.6.0-639. A buffer over-read exists in the function AP4StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, called from AP4ByteStream::Write and AP4HdlrAtom::WriteFields...
Oracle Linux 8 : ruby:2.7 (ELSA-2022-6447)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6447 advisory. - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods. Resolves: CVE-2021-41817 - Fix cookie prefix spoofing in...
Oracle Linux 8 : ruby:3.0 (ELSA-2022-6450)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-6450 advisory. - Fix double free in Regexp compilation. Resolves: CVE-2022-28738 Tenable has extracted the preceding description block directly from the Oracle Linux...
PT-2022-25499 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 versions 1.6.0-639 and earlier Description: A buffer over-read issue exists in the function AP4 StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, which is called from AP4 ByteStream::Write and AP4...
EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2336)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...
EulerOS 2.0 SP9 : vim (EulerOS-SA-2022-2307)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer Over-read in function grabfilename in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software,...
Denial Of Service (DoS)
libconfuse.so is vulnerable to denial of service. An attacker can send a malicious username parameter to the function cfgtildeexpand to cause a heap-based buffer over-read, leading to an application crash...
Denial Of Service (DoS)
libgpac.so is vulnerable to denial of service.The vulnerability exists due to the buffer over read in GFErr xtraboxread function in boxcodebase.c, which allows an attacker to crash the application by providing a malicious input...
CVE-2022-3178
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-3178
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...
CVE-2022-3178
The CVE-2022-3178 entry concerns a Buffer Over-read in GPAC (gpac/gpac) prior to 2.1.0-DEV. Affected component is the GPAC library; root cause is a buffer over-read in its code path. Impact is described as high confidentiality/integrity/availability concerns with local access and user interaction...
